CVE-2024-0471

Summary

CVE-2024-0471 is a newly disclosed critical vulnerability affecting the Human Resource Integrated System 1.0 developed by code-projects. The issue lies in the file /admin_route/dec_service_credits.php, where a sql injection vulnerability is discovered. An attacker can manipulate the argument 'date' to inject malicious SQL queries, which can be exploited remotely. This vulnerability, identified as VDB-250576, has been made public and may be exploited, posing a significant risk to systems running this software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.